From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#31709: 27.0.50; Wishlist: Perhaps Emacs should load a file when getting a particular signal? Date: Tue, 05 Jun 2018 17:21:46 +0200 Message-ID: References: <83y3fubkum.fsf@gnu.org> <83a7s9b8nv.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1528212031 14514 195.159.176.226 (5 Jun 2018 15:20:31 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Tue, 5 Jun 2018 15:20:31 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: 31709@debbugs.gnu.org To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Jun 05 17:20:27 2018 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fQDl3-0003f8-NH for geb-bug-gnu-emacs@m.gmane.org; Tue, 05 Jun 2018 17:20:25 +0200 Original-Received: from localhost ([::1]:47460 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fQDnA-0004KU-LU for geb-bug-gnu-emacs@m.gmane.org; Tue, 05 Jun 2018 11:22:36 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:36784) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fQDms-0004Ee-Bg for bug-gnu-emacs@gnu.org; Tue, 05 Jun 2018 11:22:27 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fQDmc-0007kB-HE for bug-gnu-emacs@gnu.org; Tue, 05 Jun 2018 11:22:18 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:55684) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fQDmc-0007jq-A9 for bug-gnu-emacs@gnu.org; Tue, 05 Jun 2018 11:22:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fQDmc-0004b4-1j for bug-gnu-emacs@gnu.org; Tue, 05 Jun 2018 11:22:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 05 Jun 2018 15:22:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 31709 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 31709-submit@debbugs.gnu.org id=B31709.152821211317655 (code B ref 31709); Tue, 05 Jun 2018 15:22:02 +0000 Original-Received: (at 31709) by debbugs.gnu.org; 5 Jun 2018 15:21:53 +0000 Original-Received: from localhost ([127.0.0.1]:35348 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fQDmT-0004ah-2s for submit@debbugs.gnu.org; Tue, 05 Jun 2018 11:21:53 -0400 Original-Received: from hermes.netfonds.no ([80.91.224.195]:33585) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fQDmR-0004aX-1w for 31709@debbugs.gnu.org; Tue, 05 Jun 2018 11:21:51 -0400 Original-Received: from cm-84.212.221.165.getinternet.no ([84.212.221.165] helo=stories) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1fQDmM-0005Hz-LY; Tue, 05 Jun 2018 17:21:48 +0200 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAElBMVEX+/v709PRMSksRDxHg 39+ioaGhMdrQAAACS0lEQVQ4jZ2UzZacIBCFi0T30sEHGLAeIFZmDz3FfkTq/V8lF51eThbhtHqs D+r32qTfLPq/5YkmosV518kt6sILVKurWTXLjaesU72sbbtPLW4ZT7e89gN4Xwour7hp8CF47/8d fPHYVbAVz1LC8p81fLv68kC+7n7xNEdeHhaF6ZjsPbsrOzdlgPg5W5J3yo+0Z2xFKr590mzx8FEA /CnSWQcIclCtVSvAHypNpL1N5A+apS9NtSKE/CYLstvmaD5wwo7W1RrARq3XtGmmSWkV7k2LVjhh smiR10wYBYCljLZ8iCRau6muJY9K4DQddOWT8MqqUy8+E6Wdm6H3SfZEPhw+oL2+AAhrh0Ki7JGG VEqZDowQINYBTKJAApoDJjjEcCIIBxBJAn3UBeWhW05PiTEOFyIAzpBRzcPjh7QYkWRJA5B2lx+H IpvVmCOClPMC1TQ0hrCwOn5acfQG9oRrMwSIbG9a/Q3QzjEeQ/Ni4yeH6p43WPtkLTfYufHJoV+g Wn9sk426qnG0cw+jnUJm5cnrcI/YjVtKvdMEwJo/tjm+Vkv7ttGEyrXk2l9gR4ydN0JzSEP2k6sj V3SbB+CFfgh1zdXCEkYZab+u9AZdwFV5oOwr9MgAwzJIKaGn4XFndQeX9/SJ4k5yNcypX0bEiFu6 wU+M1ty5p8sO1bBwOjCcX5hozGpfdgwKt45uzNRLG1MbkYEQAzcID99HWYYA6kgXNhvnJNcMlbsx /kFaTJcrEUh4iOPurN2TukBvTOqvfyH7AucXiH8BDOir5dFKYScAAAAASUVORK5CYII= In-Reply-To: <83a7s9b8nv.fsf@gnu.org> (Eli Zaretskii's message of "Tue, 05 Jun 2018 17:38:28 +0300") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:147026 Archived-At: Eli Zaretskii writes: > Which functionality? to load a file whose name is fixed in the > sources? Yes. > Having a fixed file name in Emacs that is loaded by an external signal > would be a terrible security risk, no? Well... Would it? I mean, the file would be something like ~/.emacs.d/sigusr1.el or something. To send a signal to the Emacs process you either have to be the user or root, and if you're the user or root, you already have all the access to the process that you need to do, well, anything. Like it was pointed out here earlier, doing the "make a running Emacs without a server do something" can be achieved through gdb magic. It's just something that's very finicky, and loading a file instead would be something that a normal user could do. So: The same attack surface that we already have, but a feature that would be usable for a normal user. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no